AccidentalTransportation & LogisticsTransportationMisconfigurationEmployee Data InvolvedIdentity (basic)PIILowResolved

Klinger Moving Company

bd_60807cfa4393f426 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 17, 2017

Filed

Nov 9, 2017

To disclose

23 days

Affected

Not disclosed

Confidence

64%

Full breach record for Klinger Moving Company →

Klinger Moving Company disclosed that files containing employee personal information (name, address) were temporarily accessible via Google search due to a server misconfiguration. The breach occurred between September 14-18, 2017, and was discovered on October 17, 2017. The company engaged forensic investigators, removed the files from Google, and offered credit monitoring to affected employees.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 17, 2017 → Notified Nov 7, 201721d ✓ CA 60-day OK23 days discovery → filing

Incident timeline

undetected · 33 days

discovery → filing · 23 days

Sep 14, 2017

Begins

Oct 17, 2017

Discovered

Nov 9, 2017

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: KLINGER Group
norm: klinger group
Domain: klinger-international.com

Name: Klinger Moving Company
norm: klinger moving
Industry: Transportation & Logisticsllm

Discovered: Oct 17, 2017
Breach occurred: Sep 14, 2017 – Sep 18, 2017
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 7, 2017
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Misconfiguration
Initial access: exploit_public_facing

During the incident: Engaged a third-party forensic investigation firm
Removed the sensitive files from Google through the use of Google’s online content removal forms and through direct communication to Google
Changes made: Offering 12 months of complimentary credit monitoring and identity restoration services with IDExperts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: CA 60-day OK · 21d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 17, 2017
→ Notified: Nov 7, 2017
21d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 17, 2017 → Notified: Nov 7, 2017	21d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-104174
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 9, 2017
Raw hash: 48b54baf93c3aacc63384269856e91ce609881c54f72fce02ac49fe819b4a264

Reporting entityKLINGER Group

Victim entityKlinger Moving Company

Incidentdiscovered Oct 17, 2017

Stated responseEngaged a third-party forensic investigation firm

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov